<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="font-family: Calibri, sans-serif; font-size: 14px; color: rgb(0, 0, 0);">
Hi!</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px; color: rgb(0, 0, 0);">
<span class="Apple-tab-span" style="white-space:pre"></span>Simple question, my client has configured the ldap database with no ou=groups, only with ou=people and all the users have some different object classes, some “students” and some “teachers”, the ldap
database does not have the posixgroup or memberUid… my ldap configuration for search “group” is:</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;"> groupname_attribute = ou </p>
<div><span style="font-family: Menlo; font-size: 11px;"> </span><span style="font-family: Menlo; font-size: 11px;">groupmembership_filter = "(&(dc=domain,dc=org)(uid=%u))</span><font face="Menlo" size="2">”</font><font face="Calibri,sans-serif"> </font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">I</font><font face="Calibri,sans-serif"> have tried many other options above.. :(</font></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">This is some user example:</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><b>Group?</b></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">dn: ou=students,dc=domain,dc=org</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">ou: students</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: organizationalUnit</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: top</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;"><br>
</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">dn: ou=teachers,dc=domain,dc=org</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">ou: teachers</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: organizationalUnit</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: top</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;"><br>
</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">dn: ou=employees,dc=domain,dc=org</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">ou: employees</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: organizationalUnit</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: top</p>
<div><br>
</div>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">———</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><b>User</b></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">dn: uid=19221422470,ou=student,dc=ufsm,dc=br</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">userPassword:: DDDDDDDDDDDDDDDDDD</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">mail: fab@cpd.domain.org</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">eduPersonPrincipalName: OJLADOIA-CXQLBAAA@domain.org</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">uid: 19221422470</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: person</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: inetOrgPerson</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: eduPerson</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: sambaSamAccount</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: brPerson</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">sambaNTPassword: DDDDDDDDDDDDDDDDDD</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">sambaLMPassword: DDDDDDDDDDDDDDDDDD</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">cn: Student Name</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">sn: Student Last Name</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">sambaSID: 19221422470</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;"><br>
</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">dn: brEduAffiliation=1,uid=19221422470,ou=students,dc=domain,dc=org</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">objectClass: brEduPerson</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">brEduAffiliation: 1</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">brEntranceDate: 20120503</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"><b><u><font color="#7f0000">brEduAffiliationType: student</font></u></b></p>
<div><br>
</div>
<div><br>
</div>
<div>————————— </div>
<div><br>
</div>
<div>Radius debug output (USER OK.. But can’t search “groups”)…</div>
<div><br>
</div>
<div>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">radtest 42833582820 teste2013 200.132.39.49:1812 100 123456789</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">Sending Access-Request of id 124 to 200.132.39.49 port 1812</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>User-Name = "42833582820"</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>User-Password = "teste2013"</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>NAS-IP-Address = 200.132.39.49</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>NAS-Port = 100</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>Message-Authenticator = 0x00000000000000000000000000000000</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">rad_recv: <b>Access-Accept packet</b> from host 200.132.39.49 port 1812, id=124, length=20</p>
</div>
<div><br>
</div>
</div>
<div>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;"># Executing section post-auth from file /etc/freeradius/sites-enabled/domain-ldap</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;">+- entering group post-auth {...}</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;">++? if (LDAP-Group == “teachers")</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;"> [ldap] Entering ldap_groupcmp()</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;"><span class="Apple-tab-span" style="white-space:pre"></span>expand: dc=domain,dc=org -> dc=domain,dc=org</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;"><span class="Apple-tab-span" style="white-space:pre"></span>expand: (&(dc=domain,dc=org)(uid=%u)) -> (&(dc=domain,dc=org)(uid=42833582820))</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;"> [ldap] ldap_get_conn: Checking Id: 0</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;"> [ldap] ldap_get_conn: Got Id: 0</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;"> [ldap] performing search in dc=domain,dc=org, with filter (&(ou=teachers)(&(dc=domain,dc=org)(uid=42833582820)))</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;"> [ldap] object not found</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;"> [ldap] ldap_release_conn: Release Id: 0</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;">rlm_ldap::ldap_groupcmp: Group teachers not found or user is not a member.</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;">? Evaluating (LDAP-Group == “teachers") -> FALSE</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;">++? if (LDAP-Group == “teachers") -> FALSE</p>
<p style="font-family: Menlo; font-size: 11px; margin: 0px;">} # server ldap</p>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div><font face="Calibri,sans-serif"><span class="Apple-tab-span" style="white-space:pre"></span>So.. I don’t have a group, I have different object classes for separate users, is there some way to collect these informations from </font><u style="color: rgb(127, 0, 0); font-family: Menlo; font-size: 11px; font-weight: bold;">brEduAffiliationType</u><font face="Menlo" size="2" style="color: rgb(127, 0, 0);"> </font>with
rlm_ldap group options? Or I will have to create groups and add users to these groups and populate the memberUid object for (I know) it work..</div>
</div>
<div><br>
</div>
<div>Thanks</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px; color: rgb(0, 0, 0);">
<div>
<p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; "><span style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);">Atenciosamente,<o:p></o:p></span></p>
<p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; "><span style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);"> </span></p>
<p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; "><b><span style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);">Jean Carlos Coelho<o:p></o:p></span></b></p>
<p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; "><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);">Analista de Soluções<o:p></o:p></span></p>
<p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; "><span style="font-size: 5pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);"> </span></p>
<p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; "><b><span lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);">Teltec Solutions<o:p></o:p></span></b></p>
<p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; "><b><span lang="EN-US" style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);"> Fone:</span></b><span lang="EN-US" style="font-size: 8pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);"> 48</span><span lang="EN-US" style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);"> 3031.3450
| <b>DDR:</b> 467 | <b>Cel:</b> </span><span lang="EN-US" style="font-size: 8pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);">48</span><span lang="EN-US" style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);"> 9179.6013<o:p></o:p></span></p>
<p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; "><span style="font-size: 12pt; font-family: 'Times New Roman', serif;"><br>
<a href="http://www.teltecsolutions.com.br/site2009/downloads/sign.html" style="color: purple; "><span style="text-decoration: none; "><img border="0" id="_x0000_i1025" src="http://suporte.teltecnetworks.com.br/images/Assinaturas/figura.jpg"></span></a><o:p></o:p></span></p>
<p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; "><o:p> </o:p></p>
</div>
<br>
</div>
</body>
</html>